CVEvulnerability

CVE-2010-4949

4.3 MEDIUM Published 2011-10-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-10-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Cross-site scripting (XSS) vulnerability in the (1) FreiChat component before 2.1.2 for Joomla! and the (2) FreiChatPure component before 1.2.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML by entering it in an unspecified window.

Affected configurations

• evnix freichat (<= 2.1.1) • evnix freichat 1.0 • evnix freichat 2.0 • evnix freichat 2.1 • evnix freichatpure (<= 1.2.1) • evnix freichatpure 1.0 • evnix freichatpure 1.2

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References